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CLAIMS 

1. A method for seeking access to a first server, the method comprising: 

determining that a client seeking access to the first server is not 
authenticated by an authentication server; 

communicating a request for login information to be returned to the 
authentication server from the client; 

receiving the login information at the authentication server from the client; 

authenticating the client by comparing the login information with 
authentication information maintained by the authentication server; and 

when the login information matches the authentication information, 
generating a user authentication indicator at the authentication server and sending 
the user authentication indicator to the first server. 

2. The method of claim 1 wherein the user authentication indicator does not 
contain reference to the login information. 

3. The method of claim 1 wherein the user authentication indicator includes a 
time stamp indicating the last time the client's login information was refreshed. 

4. The method of claim 1 wherein the user authentication indicator includes a 
time stamp indicating the last time the client sent login information. 

5. One or more computer-readable memories containing a computer program 
that is executable by a processor to perform the method recited in claim 1 . 
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6. The method of claim 1, wherein the login information is used to authenticate 
the client with respect to the authentication server but does not have to be 
transmitted to the first server to authenticate the client with respect to the first 
server. 

7. A method of authenticating a client with respect to a network server to 
which the client is seeking access, the method comprising: 

receiving a request at an authentication server from the network server to 
authenticate a client; 

determining that the client is not authenticated by the authentication server; 

receiving login information at the authentication server from the client; 

authenticating the client at the authentication server by comparing the 
received login information with authentication information maintained by the 
authentication server; and 

determining that the received login information matches the authentication 
information, whereupon an authentication indication is generated at the 
authentication server and communicated to the network server. 

8. The method of claim 7 wherein the authentication indication further 
includes: 

a first time stamp indicating the last time the client's login information was 
refreshed; and 

a second time stamp indicating the last time the client sent login 
information. 
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9. The method of claim 7 wherein the network server includes a web server 
coupled to the Internet. 

10. The method of claim 7 wherein the received login information includes a 
login ID and a password. 

11. The method of claim 7 further comprising concealing the received login 
information from the network server. 

12. The method of claim 7 further comprising concealing the authentication 
information from the network server. 

13. The method of claim 7 wherein the client has registered with the 
authentication server prior to receiving the request. 

14. The method of claim 7 wherein the network server has registered with the 
authentication server prior to receiving the request. 

15. The method of claim 7, wherein the login information is used to 
authenticate the client with respect to the authentication server but does not have 
to be transmitted to the first server to authenticate the client with respect to the 
network server. 
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16. The method of claim 7, wherein the authentication indication acts as a 
client authentication indicator. 

17. One or more computer-readable media having stored thereon a plurality of 
instructions that when executed by a processor, cause the processor to perform the 
following steps: 

receiving a request to authenticate a user seeking access to a network 

server; 

determining that the user is not authenticated by an authentication server; 

receiving login information at the authentication server from the user; 

authenticating the user at the authentication server by comparing the 
received login information with authentication information maintained by the 
authentication server; 

when the received login information matches the authentication 
information, generating a user authentication indicator at the authentication server 
and sending the user authentication indicator to the network server. 

18. The computer-readable media of claim 17 wherein the received login 
information includes a login ID and a password. 

19. The computer-readable media of claim 17, wherein the login information is 
used to authenticate the client with respect to the authentication server but does 
not have to be transmitted to the first server to authenticate the client with respect 
to the network server. 
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20. A system comprising: 

a network server to receive a request by the client to gain access to the 
network server, 

the network server to transmit a request to the authentication server 
for the authentication server to authenticate the client, the request includes 
the client's login information; 

an authentication server to determine that the client is authenticated with 
respect to the authentication server, 

the authentication server to transmit a user authentication indicator 
to the network server, the client authentication indicator to indicate whether 
the client is authenticated; and 

whereby the network server is to grant access to the client at the network 
server when the client authentication indicator determines that the client is 
authenticated at the authentication server. 

21. The system of claim 20 wherein the network server is to deny access to the 
client if the user authentication indicator indicates that the client is not 
authenticated. 
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22. The system of claim 20 wherein the user authentication indicator includes a 
first time stamp indicating the last time the client's login information was 
refreshed. 

23. The system of claim 20 wherein the user authentication indicator includes a 
second time stamp indicating the last time the client physically entered their login 
information. 
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